The Logical Security Zones provide an intuitive means of laying out an appropriately partitioned infrastructure based on the Levels of Trust and a concisely defined set of rules for how Nodes are allowed to communicate across Zones.

The Security Controls Model enables the complete end-to-end traceability between Information Assets that are stored or processed by the Infrastructure Assets and the decisions behind the Security Controls that are employed to protect them.